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Amendments to the Claims : 

This listing of claims will replace all prior versions, and 
listings, of claims in the application: 

Listing of Claims : 

1. (Original) A method of processing network security 
protocol data packets, comprising: 

providing a cryptography processing architecture on a chip; 

passing non-pre-padded network security protocol data for 
both authentication and cryptography operations from a source to 
said chip; 

conducting, in hardware, authentication and encryption, 
operations on the network security protocol data; and 

passing the cryto-processed network security protocol data 
from said chip to said source; 

wherein said non-pre-padded network security protocol data 
is passed between said chip and said source in a single pass. 

2. (Original) The method of claim 1, wherein said 
network security protocol is SSL (v3) . 

3. (Original) The method of claim 1, wherein said 
network security protocol is TLS. 

4. (Currently Amended) The method of claim 1, further 
comprising simultaneously with conducting the IS cryptography 
operations on the network security protocol data, pre-loading 
network security protocol data from a second non-pre-padded 
network security protocol packet onto the chip. 
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5. (Currently Amended) The method of claim A, further 
comprising simultaneously with conducting the encryption 
operations on the network security protocol data, conducting, in 
hardware, authentication operations on the network security 
protocol data from the second network security protocol packet. 

6. (Original) The method of claim 1, wherein said 
conducting, in hardware, authentication and encryption 
operations on the non-pre-padded network security protocol data 
comprises conducting padding and alignment operations on the 
chip. 

7. (Currently Amended) The method of claim 6, wherein 

[ [said] ] calculation of a pad length for padding operations is 
conducted by a pad engine component of the chip architecture. 

8. (Original) The method of claim 1, wherein said 
conducting, in hardware, authentication and encryption 
operations on the network security protocol data comprises 
feeding back a MAC value calculated during authentication 
operations for processing in the encryption operations. 

9. (Original) The method of claim 1, wherein said 
encryption operations further include decryption operations, 

10. (Original) The method of claim 9, wherein conducting, 
in hardware, authentication and decryption operations on the 
network security protocol data comprises feeding back decrypted 
data for processing in the authentication operations. 

11. (Canceled) A cryptography accelerator chip 
architecture, comprising : 



-6- 



Appln No. 09/929,178 
Amdt date June 7, 2005 

Reply to Office action of March 1, 2005 

an authentication component; 
an encryption component; and 

a pad engine computing and outputting pad length and 
pad to said encryption component. 

12. (Canceled) The cryptography accelerator chip 
architecture of claim 11, wherein said architecture is 
configured to process non-pre-padded network security protocol 
packets . 

13. (Canceled) The cryptography accelerator chip 
architecture of claim 11, wherein said chip resides on an 
expansion card. 

14. (Canceled) The cryptography accelerator chip 
architecture of claim 11, wherein said authentication component 
comprises an alignment block, an authentication data input 
buffer, and an authentication engine. 

15. (Canceled) The cryptography accelerator chip 
architecture of claim 11, wherein said encryption component 
comprises an alignment block, an encryption data input buffer, 
and an encryption engine. 

16. (Canceled) The cryptography accelerator chip 
architecture of claim 6, wherein said architecture is configured 
to process SSL data. 

17. (Canceled) The cryptography accelerator chip 
architecture of claim 6, wherein said architecture is configured 
to process TLS data. 
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18. (Canceled) An electronic commerce computer network 
system, comprising : 

a front end data source; 

a PCI bus connecting said front end data source to a 
cryptography accelerator chip architecture, said architecture 
having, 

an encryption component; 

an authentication component, and 

a pad engine computing and outputting pad length and pad to 
said encryption component. 

19. (Canceled) The system of claim 18, wherein said 
front end data source comprises: 

one or more network interfaces; 
a processor connected with said interfaces; 
a memory connected with said processor; and 
a bridge and memory controller connected with said 
processor and memory. 

20. (Canceled) The system of claim 18, wherein said 
chip resides on an expansion card. 

21. (Canceled) The system of claim 18, wherein said 
architecture is configured to process network security protocol 
packets . 

22- (Canceled) The system of claim 18, wherein said 

authentication component comprises an alignment block, an 
authentication data input buffer, and an authentication engine. 
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23. (Canceled) The system of claim 18, wherein said 
encryption component comprises an alignment block, an encryption 
data input buffer, and an encryption engine. 

24. (Canceled) The system of claim 18, wherein said 
network security protocol is SSL (v3) . 

25. (Canceled) The system of claim 18, wherein said 
network security protocol is TLS. 

26. (New) A method of processing network security 
protocol data packets, comprising: 

receiving, at a chip, non-pre-padded network security 
protocol data for both authentication and cryptography 
operations from a source; 

aligning, at the chip, the received non-pre-padded network 
security protocol data to provide aligned network security 
protocol data; 

conducting, at the chip, authentication operations and at 
least one of encryption operations and decryption operations on 
the aligned network security protocol data to provide processed 
network security protocol data; and 

passing the processed network security protocol data from 
the chip to the source; 

wherein the non-pre-padded network security protocol data 
is passed between the chip and the source in a single pass. 

27- The method of claim 26 comprising removing non-valid 
data from the received non-pre-padded network security protocol 
data . 

28. The method of claim 26 comprising packing the received 
non-pre-padded network security protocol data. 
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29. The method of claim 26 comprising storing the aligned 
network security protocol data in a FIFO to accumulate a 
predefined amount of data before commencing the authentication 
operations and the at least one of encryption operations and 
decryption operations . 

30. The method of claim 29 wherein the predefined amount 
of data comprises 512 bits. 

31. The method of claim 26 wherein the authentication 
operations comprise authenticating at least a portion of the 
aligned network security protocol data. 

32. The method of claim 31 where the at least a portion of 
the aligned network security protocol data comprises Content 
Type, Length and Data. 

33. The method of claim 31 comprising aligning, for 
encryption operations, at least a portion of the received non- 
pre-padded network security protocol data and the authenticated 
at least a portion of the aligned network security protocol data 
to provide the aligned network security protocol data for the 
encryption operations . 

34. The method of claim 33 wherein aligning, for 
encryption operations, comprises removing non-valid data. 

35. The method of claim 33 wherein aligning, for 
encryption operations, comprises adding padding. 
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36. The method of claim 26 comprising storing the aligned 
network security protocol data for the encryption operations in 
a FIFO to accumulate a predefined amount of data before 
commencing the encryption operations. 

37. The method of claim 26 wherein aligning comprises 
comprising aligning, within a decryption path, the received non- 
pre-padded network security protocol data to provide the aligned 
network security protocol data for the decryption operations. 

38. The method of claim 37 comprising: 

decrypting the aligned network security protocol data for 
the decryption operations; and 

providing at least a portion of the decrypted data for the 
authentication operations . 

39. The method of claim 38 comprising aligning the at 
least a portion of the decrypted data for the authentication 
operations . 

40. The method of claim 26 comprising performing at least 
a portion of the authentication operations and at least a 
portion of the at least one of encryption operations and 
decryption operations in parallel. 
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